LEGAL DISCLAMER

The author does not hold any responsibility for the bad use of this tool,
remember that attacking targets without prior consent it's illegal and punished by law.

Framework description

Morpheus it's a Man-In-The-Middle (mitm) suite that allows users to manipulate
tcp/udp data using ettercap, urlsnarf, msgsnarf and tcpkill as backend applications.
but this tool main objective its not to provide an easy way to exploit/sniff targets,
but ratter a call of attemption to tcp/udp manipulations technics (etter filters)
Morpheus ships with some pre-configurated filters but it will allow users to improve them
when launch the attack (morpheus scripting console). In the end of the attack morpheus will
revert the filter back to is default stage, this will allow users to improve filters at
running time without the fear of messing with filter command syntax and spoil the filter.
"Perfect for scripting fans to safely test new concepts"...
HINT: morpheus allow you to improve filters in 2 diferent ways
1º - Edit filter before runing morpheus and the 'changes' will be permanent
2º - Edit filter using 'morpheus scripting console' and the changes are active only once

What can we acomplish by using filters?

morpheus comes with a collection of filters writen be me to acomplish various tasks:
replacing images in webpages, replace text in webpages, inject payloads in webpages,
denial-of-service attacks (drop,kill packets from source), redirect browser traffic
to another domain and gives you the ability to build compile your filter from scratch
and run it through morpheus framework (option W).
"filters can be extended using browser languages like: javascript,css,flash,etc"...

In this example we are using " HTML tag" to inject an rediretion url into target request
In this example we are using 'CSS3' to trigger webpage 180º rotation

Framework limitations

1º - morpheus will fail if target system its protected againt arp poison atacks
2º - target system sometimes needs to clear the net cache for arp poison to be effective
3º - many attacks described in morpheus may be dropped by the target HSTS detection sys.

By default morpheus (at startup) will replace the original etter.conf/etter.dns files
provided by ettercap. On exit morpheus will revert those files to is original state..
[ ITS IMPORTANTE TO EXIT THE TOOL PROPER TO REVERT THE CHANGES MADE (press 'E' to exit) ]

Download/Install

Nmap scans available [option S]

Morpheus v2.2 allows is users to scan with nmap sending one fake User_Agent [ IPhone ]
Activate this special funtion in [ settings ] file under morpheus main folder.
HINT: This setting its only available in morpheus [ scan LAN for live hosts ]